Whitelist Input Validation

No Command Execution

Seaside does not run any interpreter that executes any input from the web. However if you run a command interpreter in addition to Seaside (SQL, XPath, ...) then Seaside can not protect you angainst command execution in those.